

WHAT ISjELAIMED IS : 

A method of managing a data object so as to comply with control 
conations for usage ofUhe data object, comprising: 

storing a aata object in the memory of a data object provider processor; 
providing \ variable number of control conditions for usage of the data 

object; 

providing a general set of control data for the data object based on the 
variable number of control conditions for usage, the general set of control data 
comprising at least one or more usage control elements defining usages of the 
data object which comply with the variable number of control conditions; and 

encrypting at least the data object to create a secure data package so that 
it is ready to transfer to a user data processor. 

2. The method of Claim 1, additionally comprising encrypting together the 
data object and the general set of comrol data. 

3. The method of Claim l\ wherein providing the general set of control data 
includes providing an identifier which uniquely identifies the general set of control data. 

4. The method of Claim 1 , wnerein providing the general set of control data 
includes providing a security control element which identifies a security process to be 
applied before usage of the data object is allowed. 

5. The method of Claim 1 , wherein providing the general set of control data 
includes providing a format control element v^hich identifies the format of the control 
data. 

6. The method of Claim 1, additionally comprising: 
receiving a request for authorizationYor usage by a user; 

comparing the usage for which authomzation is requested wdth the one or 
more usage control elements of the general setV)f control data; and 
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granting 
requested 
elements. 



the authorization if the usage for which authorization is 
comblies with the usages defined by the one or more usage control 



7. The methou of Claim 6, additionally comprising requiring payment for 
the requested authorizationVfor usage before granting the authorization. 

8. The method oi Claim 1 , additionally comprising: 
transmitting tnfe secure data package into the data processor; 
checking, in response to a request by a user for usage of the data object, 

whether the requested usage complies with the usage defined by the at least one 
usage control element of the general set of control data; and 

decrypting, in response to the requested usage complying with the usage 
defined by the at least one usage control element of the general set of control 
data, the data object so as to enable the requested usage. 

9. The method of Claim 8, additionally comprising: 

combining, after the usage of the data object, the data object and the one 
or more usage control elements; and 

reencrypting at least the data object. 



10/ A method of controlling the usage by a user of a data object so as to 
complj^with control conditions for usage of the data object, comprising: 

providing a variable numopr of control conditions for usage of the data 

object; 

providing a data object and\ control data, which comprises at least one 
usage control element defining a usage of the data object which complies with 
the variable number of control conditions, the data object being encrypted; 

receiving a request by the user For usage of the data object; 
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checkingj in response to the request by the user for usage of the data 
object, whether the requested usage complies with the usage defined by the at 
least one usage control element of the control data; and 

decrypting! in response to the requested usage complying with the usage 
defined by the at least one usage control element of the control data, the data 
object and enabling! the requested usage. 

11. The method ipf Claim 10, wherein the usage control element is updated 
after the at least one usage of the data object. 

12. The method pf Claim 10, wherein the control data comprises an 
indication of the number ofltimes the user is authorized to use the data object in 
accordance with the at least ome usage control element, wherein the requested usage of 
the data object is only enabled! when the number of times is one or more, and wherein 
the number of times is decremented by one when the requested usage is enabled. 

13. The method of Claim 10, wherein the control data comprise a security 
control element, and additionalW comprising executing, before each usage of the data 
object, a security procedure defined in the security control element. 

14. The method of Claiin 10, wherein checking whether the requested usage 
complies with the usage defined bl the at least one usage control element, comprises 
checking that a data processor is capkble of executing a security procedure specified in a 
security control element of the at le^t one usage control element, and if not, disabling 
the usage. \ 

1 5 . The method of Claim 1 d additionally comprising: 

combining, after the usade of the data object, the data object and the one 
or more usage control elements; ^d 

reencrypting at least the data object. 
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A systemi for managing a data object so as to comply with control 
ions for usage of the data object, comprising: 

a user interlace module which receives a variable number of control 
conditions; \ 

a packaging Imodule which provides a general set of control data for the 
data object based on the variable nimiber of control conditions for usage, the 
general set of control data comprising at least one or more usage control 
elements defining usages of the data object which comply with the variable 
number of control conditions and which packages the general set of control data; 
and 1 

an encrypting piodule which encrypts the data object to create a secure 
data package, which isi ready for traiisfer to a user. 

17. The system on Claim 16, wherein the general set of control data 
comprises a control data element which controls further distribution of the data object. 

18. The system of Claim 16, wherein one of the usage control elements 
includes a security control elemait that defines a security procedure. 

y^. A system for controlling the usage by a user of a data object so as to 
comf^ly with control conditions for usage of the data object, comprising: 

a usage manager module which receives a variable number of control 
conditions, checks whethena usage requested by the user complies with the 
usage defined by at least one usage control element that complies with the 
variable number of control conditions, and disables the usage requested by the 
user when the usage does not comply with the usage defined by the at least one 
usage control element; and \ 

a decryption module which decrypts the data object, responsive to the 
check for requested usage by the Visage manager module. 
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20. The system of Claim 19, wherein one of the usage control elements 
includes a security control element that defines a security procedure. 

21. The system pf Claim 20, wherein the security procedure is an RSA 
encryption algorithm. 

22. The system oq Claim 19, wherein the usage manager module encrypts the 
data object after usage. 

A method of Controlling the usage by a user of data objects so as to 
comply with a variable number of conditions for usage of the data objects, comprising: 

providing at least two data packages, each data package comprising a 
data object and a user Bet of control data, which comprises at least one usage 
control element defining a usage of the data object which complies with the 
variable number of condtions, the data object being encrypted; 

examining the us£^e control elements of the at least two data packages to 
find a match; and 

performing an actibn being specified in the user sets of control data of 
the at least two data packages. 

24. The method of Claim 23, wherein one of the at least two data packages is 
a sell order, and wherein one of the at least two data packages is a buy order. 

25. The method of Claim\23, additionally comprising checking whether a 
data processor is capable of executing a security procedure specified in a security 
control element of the at least one usage control element, and disabling the usage when 
the data processor is not capable of exec^uting the security procedure, and decrypting the 
data objects. 



26. 



reencrypting each of the data object. 




A method of managing a data object so as to comply with a variable 
numbed' of control conditions forjusage of the data object, comprising: 

providing variably control conditions for usage of the data object; 
providing a gener il set of control data for the data object based on the 
variable control condition 3 for usage, the general set of control data comprising 
at least one or more usag3 control elements defining usages of the data object 
which comply with the va iable control conditions; 

providing, in respopse to a request for authorization for usage of the data 
of control data, which comprises at least a subset of 
data, including at least one of the usage control 



object by a user, a user se 
the general set of contro 



elements; 

encrypting at least lihe data object to create a secure data package; and 
checking, before al owing transfer of the data package to the user, that 
the request for authorization for usage of the data object has been granted. 

28. The method of Clam 27, additionally comprising checking whether a 
data processor is capable of executing a security procedure specified in a security 
control element of the at least one usage control element, and disabling the usage when 
the data processor is not capable of executing the security procedure. 



29. The method of Claiml27, wherein the data object is composed of at least 
two constituent data objects and wherein the user set of control data, in response to a 
request for authorization for usage of one of the constituent data objects by a user, is 
created only for that constituent dat^ object and combined only with a copy of that 
constituent data object. 



30. The method of Claim \ 27, wherein the request for authorization is 
received from a user via a data network. 
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31. The method o:' Claim 27, wherein the data object is a composite data 
object including at least two constituent data objects, and wherein providing a general 
set of control data comprises ] iroviding a respective general set of control data for each 
of the constituent data objects and the composite data object, and wherein providing a 
user set of control data compri; es providing a respective user set of control data for each 
of the constituent data objects and the composite data object. 



32. The method as 
user set of control data in a 



lefmed in Claim 27, additionally comprising storing the 
processor of a data object provider. 



33. The method as c efmed in Claim 27, additionally comprising: 
transmitting the data package; 

checking, in re: ponse to a request by the user for usage of the data 
object, whether the req lested usage complies with the usage defined by the at 
least one usage control « lement of the user set of control data; and 

decrypting, in re >ponse to the requested usage complying with the usage 
defined by the at least o le usage control element of the user set of control data, 
the data object and enabling the requested usage. 



34. The method of Clbim 27, additionally comprising: 
transmitting the data package; and 
reencrypting the data object. 

35. A system for managing a data object so as to comply with control 
concMons for usage of the data object, comprising: 

a packaging module which provides a general set of control data for the 
data object based on variabfie conditions for usage, the general set of control data 
comprising at least one or more usage control elements defining usages of the 
data object which comply with the variable conditions and which combines the 
user set of control data with me data object, and wherein the packaging module 
provides in response to a request for authorization for usage of the data object by 
a user, a user set of control dam, which comprises at least a subset of the general 
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subset comprises at least one of the usage control 



set of control data, whic" 
elements; 

an encrypting moc ule which encrypts the data object to create a secure 
data package, which is rea ly for transfer to a user; and 

a control module which checks that the request for authorization for 
usage of the data object 1 las been granted before allowing transfer of the data 
package to the user. 

36/' A method of maiaging a data object so as to comply with control 
conditieTns for usage of the data object, comprising: 

set of control data for the data object based on a 
conditions for usage, the general set of control data 
more usage control elements defining usages of the 
V dth the variable number of control conditions; and 
the data object to create at least one secure data 



providing a generi 
variable number of contro 
comprising at least one or 
data object which comply 

encrypting at least 



package, which is ready forltransfer to a user. 

37. The method of Clainm 36, wherein the data object and the usage control 
elements are encrypted into a single secure package. 

38. The method of Claim! 36, wherein providing the general set of control 
data includes providing a security control element which identifies a security process to 
be applied before usage of the data object is allowed. 



25 39. The method of Claim 3p, wherein providing the general set of control 

data includes providing a format control element which identifies the format of the 
control data. 
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40. The method of Claim 36, additionally comprising: 

receiving a request for authorization for usage by a user; 
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comparing the usai'e for which authorization is requested with the one or 
more usage control elemer ts of the general set of control data; and 

granting the auth jrization if the usage for which authorization is 
requested complies with t le usages defined by the one or more usage control 



elements. 



compl 




control conditions foi 
providing a variab 
set of control data includin; 



A method of manajjing a data object at a data provider computer so as to 



usage of the data object, comprising: 
; set of control data for the data object, the variable 
usage information regarding the data object; 
concatenating the variable set of control data with the data object; and 
encrypting at least Ithe data object to create at least one secure data 
package that is ready for transmission to a user data processor. 




42. The method of Clairn 41, wherein the encrypting includes storing the at 
least one secure data package at the data provider computer. 

f3. A method of managing a data object at a data provider computer so as to 
corriply with control conditions for usage of the data object, comprising: 

providing a set of control data for the data object based on a variable 
number of control conditions for usage, the set of control data including usage 
information regarding the data object; 

combining the set of control data with the data object; and 
encrypting at least the! data object to create at least one secure data 
package, so that the at least 9ne secure data package is stored in the data 
provider computer. 
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44. The method oi 



least one secure data package ti ) the user data processor, 



45. The method of Claim 43, wherein the data object comprises digital 



money. 



46. The method of 



file. 



47. The method of 



Claim 43, additionally comprising transmitting the at 



Claim 43, wherein the data object comprises an empty 



Dlaim 43, wherein the data object is created by an author. 



48/ A method of nanaging a data object so as to comply with control 
conditions for usage of the dati object, comprising: 

storing a data o jject in the memory of a data object provider processor; 
providing a vai iable number of control conditions for usage of the data 
object; and 

providing a set of control data for the data object based on the variable 
number of control conditions for usage, the set of control data comprising at 
least one or more usage control elements defining usages of the data object 
which comply with the k^ariable number of control conditions. 



49. The method of Cllaim 48, additionally comprising: 

transmitting thejdata object and the set of control data into a data 
processor; and 

checking, in respbnse to a request by a user for usage of the data object, 
whether the requested usage complies with the usage defined by the at least one 
usage control element of ihe set of control data; and 

complying with tpe usage defined by the at least one usage control 
element of the set of contflol data so as to enable the requested usage. 



50. The method of Cl^m 49, additionally comprising combining, after the 
usage of the data object, the data object and the one or more usage control elements. 
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5 1 . The method of Claim 



49, wherein the data object comprises digital data. 



52. The data object of G[laim 49, wherein the control data comprises an 
object identifier. 



53. The data object of Claim 49, wherein the data object comprises a video 



file. 
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